Commit Graph

1337 Commits

Author SHA1 Message Date
Yanase Yuki
c8756e825f treewide: update SELinux project URL
It seems old website has been retired.

Signed-off-by: Yanase Yuki <dev@zpc.st>
Link: https://github.com/openwrt/openwrt/pull/21279
Signed-off-by: Robert Marko <robimarko@gmail.com>
2026-01-02 18:07:02 +01:00
Eric Fahlgren
f4fdb9964a treewide: add explicit default variant
Some packages with variants did not specify the default among the
alternatives, so were left without any apk 'provider_priority'
for that package.  This caused the apk solver to select the wrong
variant, silently changing the requested package list.

Notable among these were busybox, procd and the hostapd/wpad suite.
This behavior presented in the imagebuilders when creating the
image as follows, silently replacing packages even when explicitly
requested:

    $ make image PACKAGES=busybox
    ...
    ( 14/148) Installing busybox-selinux (1.37.0-r6)
    ...

We add 'DEFAULT_VARIANT:=1' to the packages that were missing one,
providing apk with sufficient information to choose the correct
package.

See link below for further examples and discussion.

Link: https://github.com/openwrt/openwrt/pull/21288#issuecomment-3704101422
Signed-off-by: Eric Fahlgren <ericfahlgren@gmail.com>
Link: https://github.com/openwrt/openwrt/pull/21358
Signed-off-by: Robert Marko <robimarko@gmail.com>
2026-01-02 14:46:30 +01:00
George Sapkin
d75a6bed7a ca-certificates: provide a virtual package
Switch ca-certs provides to use the new virtual provides semantic that
enables ca-bundle and ca-certificates to be installed side-by-side.

Provide the new format virtual ca-certificates-any in ca-bundle.

Fixes: https://github.com/openwrt/openwrt/issues/21257
Signed-off-by: George Sapkin <george@sapk.in>
Link: https://github.com/openwrt/openwrt/pull/21288
Signed-off-by: Robert Marko <robimarko@gmail.com>
2025-12-31 18:16:48 +01:00
Paul Donald
b15628ec80 apk: bump to 3.0.2
We drop patch 0020-apk-fix-compile: integrated at source.
Compressed help now functions normally.

Signed-off-by: Paul Donald <newtwen+github@gmail.com>
Link: https://github.com/openwrt/openwrt/pull/21127
Signed-off-by: Robert Marko <robimarko@gmail.com>
2025-12-12 13:59:39 +01:00
Christian Marangi
04946ee8ab
openwrt-keyring: update to Git HEAD (2025-12-10)
f0670054fd3a apk: add OpenWrt 25.12 release build public key

Signed-off-by: Christian Marangi <ansuelsmth@gmail.com>
2025-12-10 23:22:27 +01:00
Hauke Mehrtens
0cceb4b509 ubus: update to Git HEAD (2025-12-02)
3cc98db1a422 formal: fix workflow permissions

Changes: 2737da3819...3cc98db1a4

Link: https://github.com/openwrt/openwrt/pull/21102
Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
2025-12-09 20:39:06 +01:00
Hauke Mehrtens
e7a57a980e uci: update to Git HEAD (2025-12-02)
66127cd76c5d formal: fix workflow permissions

Changes: 5bea135723...66127cd76c

Link: https://github.com/openwrt/openwrt/pull/21103
Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
2025-12-09 20:36:25 +01:00
Hauke Mehrtens
d11b77db5e apk: Fix host compilation with C89
This fixes the following build error:
```
../src/apk.c: In function 'parse_options':
../src/apk.c:584:4: error: a label can only be part of a statement and a declaration is not a statement
  584 |    char *arg = opt_parse_arg(&st);
      |    ^~~~
```

Upstream MR: https://gitlab.alpinelinux.org/alpine/apk-tools/-/merge_requests/376

Fixes: b91ebdabbb ("apk: bump to 3.0.1")
Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
2025-12-09 02:06:26 +01:00
Paul Donald
b91ebdabbb
apk: bump to 3.0.1
Recently finalized 3 branch bumped to 3.0.1

dropped patches
-010-libressl4.patch; integrated at source
-999-small-scripts-tar.patch; integrated at source

refreshed remaining patches

DEPRECATION: Option 'compressed-help' is deprecated - removed.
DEPRECATION: Option 'zstd' value 'false' is replaced by 'disabled'

Signed-off-by: Paul Donald <newtwen+github@gmail.com>
Link: https://github.com/openwrt/openwrt/pull/21093
Signed-off-by: Christian Marangi <ansuelsmth@gmail.com>
2025-12-08 21:30:39 +01:00
Paul Donald
1684c28cfe
apk: define minimal variant for install
Choose the minimal release build which excludes a number of
unused applets, not used on user devices.

Signed-off-by: Paul Donald <newtwen+github@gmail.com>
Link: https://github.com/openwrt/openwrt/pull/21093
Signed-off-by: Christian Marangi <ansuelsmth@gmail.com>
2025-12-08 21:30:39 +01:00
Robert Marko
af853d3d38 rpcd: update to Git HEAD (2025-12-03)
a284e7751fa7 file: bump sz_size to 64 bits
ffb9961c1f8b file: provide user name and group name lookups for stat listings

Signed-off-by: Robert Marko <robimarko@gmail.com>
2025-12-04 11:06:48 +01:00
Nick Hainke
cc88cf5b65 selinux-policy: update to 2.8.4
Changelog:
73e77ae odhcpd anticipate per link configuration
c353698 various
8465968 iwinfo: ucode
9d9f12c various
2f41f9b various
70bb8bc various loose ends
6e817d4 netifd odhcpd wifi
69558b8 addresses various surfaced policy issues
9eb2dae README update
0a710e3 README
6fffaf6 pidfs: fsuse task seclabelfs
b051c6d makefile reproducible

Link: https://github.com/openwrt/openwrt/pull/20955
Signed-off-by: Nick Hainke <vincent@systemli.org>
2025-11-27 13:32:52 +01:00
Paweł Owoc
8d8990a07e mtd: add dump command help
Add missing dump command help.

Signed-off-by: Paweł Owoc <frut3k7@gmail.com>
Link: https://github.com/openwrt/openwrt/pull/20725
Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
2025-11-25 00:43:23 +01:00
Paweł Owoc
693db5945b mtd: allow to use dump and verify on read-only devices
Dump and verify commands can be used on read-only devices.

Signed-off-by: Paweł Owoc <frut3k7@gmail.com>
Link: https://github.com/openwrt/openwrt/pull/20725
Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
2025-11-25 00:43:23 +01:00
Nick Hainke
57e8eb6208 refpolicy: update to 2.20250923
Changelog:
  Notable Changes
  - Several updates and fixes for systemd
  - Add new permissions and policy capabilities
  - Drop reiserfs support (it was removed in kernel 6.13)

  New Modules
  - bubblewrap
  - incus
  - kanidm
  - seatd
  - opensnitch

Refresh patch:
- 100-no-docs.patch

Link: https://github.com/openwrt/openwrt/pull/20861
Signed-off-by: Nick Hainke <vincent@systemli.org>
2025-11-23 09:23:21 +01:00
Nick Hainke
08be1ef1a1 selinux-policy: update to 2.8.3
Changelog:
- b1d7050 README
- 13f78a8 nlbwmon fix
- 9a98b2b ratelimit and nlbwmon rules
- a193e4b adds nlbwmon skel
- b5672a0 README: adds nlbwmon to wish list
- 2058100 adds radius and uam unreserved port
- 026b712 ratelimit for busybox ip
- 7661081 adds ratelimit sysagent skel and update README
- 3bea826 luci and rpcserver apk related
- ba8607d all sys agents can use inherited ssh server pipes
- 24b9396 README: adds some more items to wish list
- da7a02c ttyxperm: adds TIOCSERGETLSR
- 2fce9ee Revert "file_contexts.subs_dist: order matters with libselinux 3.8"
- 9a13714 file_contexts.subs_dist: order matters with libselinux 3.8
- a148827 README update
- 9d9a1ff iproute2 ip: ip mptcp monitor
- cf7efdc envtools: setenv

Link: https://github.com/openwrt/openwrt/pull/20859
Signed-off-by: Nick Hainke <vincent@systemli.org>
2025-11-23 09:22:41 +01:00
Rosen Penev
8e5db148e9
apk: update to 3.0.0-rc8
Added compatibility patch for LibreSSL 4.0.

Refreshed other patches.

Signed-off-by: Rosen Penev <rosenp@gmail.com>
Link: https://github.com/openwrt/openwrt/pull/20851
Signed-off-by: Christian Marangi <ansuelsmth@gmail.com>
2025-11-21 23:35:33 +01:00
Hauke Mehrtens
853da1d299 rpcd: update to Git HEAD (2025-11-10)
483263c7b0cd file: append "target" for symbolic links

Link: https://github.com/openwrt/openwrt/pull/20849
Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
2025-11-21 21:40:58 +01:00
Hauke Mehrtens
96fb4b5f1a uci: update to Git HEAD (2025-11-18)
b65c091a09a9 github: ci: disable json-c tests
e1ab90c510ce github: ci: add tests
8022b2e4d010 uci: add a simple build script
dec51f48a114 github: ci: add cmake build and source directories
238963f48c84 github: ci: add powerpc arch
ebb3a01a0b01 build: install uci
5bea13572325 github: ci: add MIPS64, PowerPC64 and RISCV64

Link: https://github.com/openwrt/openwrt/pull/20848
Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
2025-11-21 21:37:51 +01:00
Hauke Mehrtens
2cffbea0ae ubus: update to Git HEAD (2025-11-18)
966c82b2197c github: ci: disable json-c tests
c4d7aff97bbe github: ci: add tests
00010b8af022 ubus: add a simple build script
1eab20d6cda2 github: ci: add cmake build and source directories
f79ddca64806 github: ci: add powerpc arch
5c7eea7fc090 build: install ubus
2737da3819fe github: ci: add MIPS64, PowerPC64 and RISCV64

Link: https://github.com/openwrt/openwrt/pull/20847
Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
2025-11-21 21:36:44 +01:00
Eric Fahlgren
5d85657f6d apk-tools: implement compression of on-device scripts.tar
Default behavior for apk was to create an uncompressed scripts.tar
file.  Due to the structure of tar files, with fixed block
size and null padding, this file becomes very large on OpenWrt
installations where there are typically two scripts per package.
This could cause the raw tar file to easily grow to over 500KB,
whereas the compressed file is generally around 20-30KB.

When stored in the /rom partition of a squashfs device, the file
is compressed and this is not an issue.  But, as soon as you add
or delete a package, the scripts.tar file is fully expanded into
the /overlay partition and can cause issues on small-flash devices.

This issue was addressed in an upstream commit by detecting
whether the scripts.tar file is compressed (its name must be
exactly 'scripts.tar.gz'), and then retaining that compression by
reading/writing the file using a compressed stream.

This commit applies a cherrypicked patch for the upstream commit, and
compresses the scripts.tar during construction of the device rootfs.

Fixes: https://github.com/openwrt/openwrt/issues/17108
Link: 012cdcfdf9
Signed-off-by: Eric Fahlgren <ericfahlgren@gmail.com>
Link: https://github.com/openwrt/openwrt/pull/20795
Signed-off-by: Robert Marko <robimarko@gmail.com>
2025-11-18 17:25:06 +01:00
Hauke Mehrtens
1f21cc9600 uci: update to Git HEAD (2025-11-03)
57c1e8cd2c05 github: add CI build
2e46a7405f26 github: improve CI
c1e2eee6c5e3 github: fix CI apt dependencies

Link: https://github.com/openwrt/openwrt/pull/20717
Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
2025-11-11 00:22:11 +01:00
Hauke Mehrtens
c0a30370f9 ubus: update to Git HEAD (2025-11-03)
6fdf7a979162 github: improve CI
0d4bcb56f5e1 github: fix CI apt dependencies

Link: https://github.com/openwrt/openwrt/pull/20716
Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
2025-11-11 00:21:16 +01:00
Hauke Mehrtens
825dbed09a ubox: update to Git HEAD (2025-10-30)
6f78fa496bf3 ubox validate: port range check fix

Link: https://github.com/openwrt/openwrt/pull/20715
Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
2025-11-11 00:20:14 +01:00
Aleksander Jan Bajkowski
412bc7e1d8 rpcd: update to Git HEAD (2025-11-07)
11e0bee504c6 file: use lstat for file list (instead of stat) to reveal links
917000075eb4 iwinfo: add he and eht operation info to wifi scan

Signed-off-by: Aleksander Jan Bajkowski <olek2@wp.pl>
Link: https://github.com/openwrt/openwrt/pull/20692
Signed-off-by: Robert Marko <robimarko@gmail.com>
2025-11-08 12:12:18 +01:00
Christian Marangi
ac7abe070a
opkg: update to Git HEAD (2025-11-05)
ba73bc4672ec CMakeLists: update cmake minimum required version to 3.10
988399770af1 libbb: CMakeLists: update cmake minimum required version to 3.10
ce546f3ebff5 opkg: CMakeLists: update cmake minimum required version to 3.10
80503d94e356 libopkg: CMakeLists: update cmake minimum required version to 3.10

Fixes: #20659
Signed-off-by: Christian Marangi <ansuelsmth@gmail.com>
2025-11-05 16:47:32 +01:00
Felix Fietkau
4b907e69ea ubus: update to Git HEAD (2025-10-17)
b462895d3157 lua: CMakeLists: drop redundant cmake_minimum_required
f247c18f8a55 examples: CMakeLists: drop redundant cmake_minimum_required
83a70399030d github: add CI build
d31effb4277b ubusd: Fix out of bounds access in event register message
d95837b1b143 ubusd: acl: compare uid/gid instead of user/group strings
b81257bb20dd ubusd: load extra group IDs for a client process
7d7b45fea05b add debian/ directory
aa4a7ee1d341 ubusd: fix more instances of missing length checks for patterns
60e04048a0e2 ubusd: fix ACL check for receiving events

Signed-off-by: Felix Fietkau <nbd@nbd.name>
2025-10-17 13:28:52 +02:00
Christian Marangi
e408030cec
apk-tools: fix compilation warning from downstream full print patch
Fix trivial compilation warning caused by downstream full print patch.

../src/app_list.c: In function 'print_full':
../src/app_list.c:85:35: warning: format '%zu' expects argument of type 'size_t', but argument 2 has type 'uint64_t' {aka 'long long unsigned int'} [-Wformat=]
   85 |         printf("Installed-Size: %zu\n", pkg->installed_size);
      |                                 ~~^     ~~~~~~~~~~~~~~~~~~~
      |                                   |        |
      |                                   |        uint64_t {aka long long unsigned int}
      |                                   unsigned int
      |                                 %llu
../src/app_list.c:86:25: warning: format '%zu' expects argument of type 'size_t', but argument 2 has type 'uint64_t' {aka 'long long unsigned int'} [-Wformat=]
   86 |         printf("Size: %zu\n", pkg->size);
      |                       ~~^     ~~~~~~~~~
      |                         |        |
      |                         |        uint64_t {aka long long unsigned int}
      |                         unsigned int
      |                       %llu
../src/app_list.c:58:31: warning: unused variable 'd' [-Wunused-variable]
   58 |         struct apk_dependency d;

Remove unused variable and use PRIu64 to handle uint64_t type.

Signed-off-by: Christian Marangi <ansuelsmth@gmail.com>
2025-10-14 17:15:07 +02:00
Paul Spooren
4bef775c70 packages: bump APK to improve reproducibility
The package bump to version rc6 incorporates two recent changes, first, the
stored `mtime` honors SOURCE_DATE_EPOCH, making a prior "touch" obsolete.
Secondly the order of files added to created packages is now sorted, improving
reproducibility, too.

Signed-off-by: Paul Spooren <mail@aparcar.org>
2025-10-08 11:13:33 +02:00
Christian Marangi
11a7c77fcb
uci: update to Git HEAD (2025-10-05)
272fc1348ea9 lua: CMakeLists: drop redundant cmake_minimum_required
5e69edac2ec4 CMakeLists: fix CMake warning for INCLUDE macro

Signed-off-by: Christian Marangi <ansuelsmth@gmail.com>
2025-10-05 14:34:57 +02:00
Hauke Mehrtens
b00fcf3614 ubus: update to Git HEAD (2025-10-04)
ad2768bbc166 lua: build: require CMake >= 3.10 due to dropped legacy support

Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
2025-10-04 12:12:52 +02:00
Christian Marangi
88fe81bb0c
ubus: update to Git HEAD (2025-10-04)
2b69c9859946 examples: CMakeLists: update cmake minimum required version to 3.10

Signed-off-by: Christian Marangi <ansuelsmth@gmail.com>
2025-10-04 00:08:56 +02:00
Christian Marangi
b2d2d94137
procd: update to Git HEAD (2025-10-04)
3b3501abb63d upgraded: CMakeLists: update cmake minimum required version to 3.10

Signed-off-by: Christian Marangi <ansuelsmth@gmail.com>
2025-10-04 00:08:50 +02:00
Christian Marangi
46ea169578
uci: update to Git HEAD (2025-10-04)
a07209538959 lua: CMakeLists: update cmake minimum required version to 3.10

Signed-off-by: Christian Marangi <ansuelsmth@gmail.com>
2025-10-04 00:04:06 +02:00
Christian Marangi
cc0e9d0877
fstools: update to Git HEAD (2025-10-03)
12858e2878ef CMakeLists: update cmake minimum required version to 3.10

Signed-off-by: Christian Marangi <ansuelsmth@gmail.com>
2025-10-03 23:56:46 +02:00
Christian Marangi
67a7e9a9c4
fwtool: update to Git HEAD (2025-10-03)
04cd252e4e93 CMakeLists: update cmake minimum required version to 3.10

Signed-off-by: Christian Marangi <ansuelsmth@gmail.com>
2025-10-03 23:56:29 +02:00
Christian Marangi
5e1c63d6d4
procd: update to Git HEAD (2025-10-03)
ebfe7d0f2844 CMakeLists: update cmake minimum required version to 3.10

Signed-off-by: Christian Marangi <ansuelsmth@gmail.com>
2025-10-03 23:56:14 +02:00
Christian Marangi
40116d8766
rpcd: update to Git HEAD (2025-10-03)
cfb93f105ca2 CMakeLists: update cmake minimum required version to 3.10

Signed-off-by: Christian Marangi <ansuelsmth@gmail.com>
2025-10-03 23:55:57 +02:00
Christian Marangi
146d74a260
ubox: update to Git HEAD (2025-10-03)
c75525a58a7e CMakeLists: update cmake minimum required version to 3.10

Signed-off-by: Christian Marangi <ansuelsmth@gmail.com>
2025-10-03 23:55:41 +02:00
Christian Marangi
360e8bc1a1
ucert: update to Git HEAD (2025-10-03)
57270b247c91 CMakeLists: update cmake minimum required version to 3.10

Signed-off-by: Christian Marangi <ansuelsmth@gmail.com>
2025-10-03 23:55:09 +02:00
Christian Marangi
21d0803655
urngd: update to Git HEAD (2025-10-03)
f17e33d99427 CMakeLists: update cmake minimum required version to 3.10

Signed-off-by: Christian Marangi <ansuelsmth@gmail.com>
2025-10-03 23:54:41 +02:00
Christian Marangi
285d20cf07
usign: update to Git HEAD (2025-10-03)
c4c72b1b0794 CMakeLists: update cmake minimum required version to 3.10

Signed-off-by: Christian Marangi <ansuelsmth@gmail.com>
2025-10-03 23:54:34 +02:00
Felix Fietkau
42b5cf24a8 procd: update to Git HEAD (2025-10-02)
ace5f272e139 service: fix use-after-free on service data update
94bfb9cf4238 service: implement set_data ubus method
cb40d082b126 service: send ubus notifications for event triggers

Signed-off-by: Felix Fietkau <nbd@nbd.name>
2025-10-02 11:04:10 +02:00
Daniel Golle
c68a41818e rpcd: update to git HEAD
d4fa147 rpc-sys: packagelist: handle ABI versions in apk world properly

Signed-off-by: Daniel Golle <daniel@makrotopia.org>
2025-09-30 12:41:58 +01:00
Felix Fietkau
2f6c52009b uci: update to Git HEAD (2025-08-14)
f3fc0b760406 libuci: fix false positive warning on older gcc versions
9033e8c27253 blob: use blobmsg_parse_attr in __uci_blob_check_equal

Signed-off-by: Felix Fietkau <nbd@nbd.name>
2025-08-14 19:09:53 +02:00
Felix Fietkau
813002176f procd: update to Git HEAD (2025-08-12)
dafdf98b03bf service: fix object nesting in the ubus get_data call

Signed-off-by: Felix Fietkau <nbd@nbd.name>
2025-08-12 18:14:44 +02:00
Felix Fietkau
7df4f7d709 rpcd: update to Git HEAD (2025-08-09)
1905e096a8b7 ucode: adjust for new ext resource type

Fixes: https://github.com/openwrt/rpcd/issues/17
Fixes: https://github.com/openwrt/luci/issues/7878
Fixes: https://github.com/openwrt/openwrt/issues/19726
Signed-off-by: Felix Fietkau <nbd@nbd.name>
2025-08-09 15:56:20 +02:00
Felix Fietkau
71c85bd88a procd: update to Git HEAD (2025-08-07)
84372dab89a8 hotplug: switch to using avl tree for hotplug subsystems
4d023b8a8c51 hotplug: send event notifications
467800980021 hotplug: ensure that the button subsystem is always registered

Signed-off-by: Felix Fietkau <nbd@nbd.name>
2025-08-07 15:45:10 +02:00
Dominick Grift
098e98dd4d selinux-policy: update version to v2.8.2
Changes since v2.6:

a3383be configgenerate
8d04a3b adds modemnodedev and deletes cdcserialtermdev
77b52c4 README
3b8e1dc README
356211b README: add note about possible regression since selinux 3.6
171a3cc iwinfo
16ae0c1 haproxy
78bcb69 dufsysagent fix
6d88ac5 dufs fixes filecon
c9aa6cd adds dufs
5f15774 net: clean up
02c8e76 unneeded sys.moduleload calls
6334366 README: todo /usr/bin/fit_check_sign
12b659f README: add reminder on polvers
3e93844 related to bpi-r4 Linux 6.12
449cb74 sysagent: use logintermdev (no differences)
20ad31d unlabeled/invalid: these are relative to .
9c85622 iproute2sysagent: ss
c2a7863 README
6d7ad1c adds swaptools swapfile
5b69b63 rpcd related to luci mount tab
afeee67 hotplugcall: iwinfo
6ca7996 adds ttyGS0 tty login serial
f8b2fba wget: read shouldnt be needed
e2faf89 bmon adds ~/.bmonrc
5ede79b adds seccompconffile
3034b20 some comments
9b4b44e loginsysagent: loose end
fe0973c README
ea06908 loginsysagent
2405c46 loginsysagent
9413988 loginsysagent: adds skel for wrapper retry
22929cb Revert "login.cil: skel for login.sh wrapper"
fbcccf4 login.cil: skel for login.sh wrapper
1addde4 Revert "iproute2 ip protocol not supported"
f38fd20 iproute2 ip protocol not supported
5abde97 openssl for openssl s_client -connect ip:port
642ddd9 ttyd
be00125 iproute2 ip
1fbba89 iproute2 ip
342c981 no cap_userns
d241cfb iproute2 ip netns related
6778504 iproute2 ip netns related
491d3c4 iproute2 ip
d2dce16 iproute ip
8b43b1c iproute2 ip basic netns support
107e63f iproute2 ip
1b39905 README: looks like this is a no-go
b081dba acme note about expected removal of /tmp/run/acme/lock
4df51dd haproxy
ee825c8 coreutils: these dont have busybox equivalent
46f4a8b Revert "ucode: needed for custom rules in /etc/nftables.d"
048337a ucode: needed for custom rules in /etc/nftables.d
76b5a69 haproxy pid file
c90f840 openssl s_client -connect
dbbe475 haproxy local logging
7f58831 haproxy /etc/haproxy for stuff like proxy maps
050afc7 acmesysagent
031e0f3 README
2acf047 haproxy and iproute2
c5d1ce4 README
b9304a5 haproxy whitespace
b07c524 adds haproxy and iproute2 ss rules
9bc53b1 acme
6031379 openssl
8d6aaba adds sysfsutils skel
fc24d0c README
12cc1d4 openssl
79cf372 apk leaks memfd
9912075 adds socat dataexecfile
011bf9a adds wget (consolidate uclient-fetch)
0ba70c0 adds ftp reserved ports
5b35e96 README
bd02d73 README
4f6895f netifd comment fix
bd46c1f coreutils
ad13688 dnsmasq: more robust filecon
d5d6dd3 README
74f73d1 fwtool: do_stage2: online sysupgrade sdcard
8251117 README
badfb57 iw/tmux socket creation is implied in macros
5663f89 iwsysagent and readme
6815a6c README
bde5a56 README
6b89f0a hotplug and netif unconfined.exec.file underline "trusted"
862da9b unknown netifd protocols with netif.unconfined.exec.file

Signed-off-by: Dominick Grift <dominick.grift@defensec.nl>
Signed-off-by: Petr Štetiar <ynezz@true.cz> [package hash fix]
Link: https://github.com/openwrt/openwrt/pull/19080
Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
2025-07-26 18:22:30 +02:00
Fengyu Wu
8bf023da76 ca-certificates: Update to 20250419
upstream changelog:

[ Alexander Kanavin ]
* update-ca-certificates: add a --sysroot option

[ Julien Cristau ]
* Update Mozilla certificate authority bundle to version 2.74.
  The following certificate authorities were added (+):
  + D-TRUST BR Root CA 2 2023
  + D-TRUST EV Root CA 2 2023
  The following certificate authorities were removed (-):
  - Entrust Root Certification Authority - G4
  - SecureSign RootCA11
  - Security Communication RootCA3
  - SwissSign Silver CA - G2

Signed-off-by: Fengyu Wu <saldry@proton.me>
Link: https://github.com/openwrt/openwrt/pull/19462
Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
2025-07-21 23:41:34 +02:00